Secrets Manager vs Environment Variables: What's Actually Safer

"Don't put secrets in environment variables" gets repeated a lot, usually without the reasoning. The more useful version is about three properties of any secret: where it's stored, who and what can re